What visitors were seeing
The homepage began showing fake virus warnings. On mobile, visitors were redirected to a scam page claiming their device was infected. These were messages displayed by the website, not evidence that the visitor’s phone had a virus.
The immediate problem was the experience being served to customers. We needed to identify what was being loaded and remove the unwanted behaviour.
The source was a code embed
Our review found an unwanted code embed on the homepage that loaded external advertising scripts. Those scripts were responsible for the popups and redirects seen during testing.
That distinction matters. This was a problem with code included in the project, rather than proof that the whole Webflow hosting platform had been compromised. The source and scope of an incident need investigation rather than assumptions.
How we approached the cleanup
We removed the unwanted embed blocks, checked shared parts of the project and published a cleaned version. We then tested the website across desktop browsers and mobile devices and used an external site scan as an additional check.
The popups and redirects stopped appearing in those checks. We also reviewed account security and the process for adding code. A clean scan is useful evidence, but it is not a guarantee that a website can never be affected again.
What business owners can take from this
Keep a record of scripts and embeds added to your website: who supplied them, why they are needed and who has access to change them. Be particularly cautious about code promoted as an easy advertising, SEO or monetisation shortcut.
Use trusted accounts, enable stronger sign-in protection where available and review access when someone stops working on the site. If visitors report unusual warnings or redirects, investigate promptly rather than assuming the issue is on their device.
A support enquiry is more useful when it includes the affected page, the device or browser, an approximate time and a screenshot. Avoid clicking through the suspicious popup to investigate it yourself.
Further reading
Need a hand with something similar?
Tell us what you are trying to achieve or what is not working. We will help you work out the next step.
Explore the service Contact us
